[openssl-dev] where is PEM_read_bio_X509_AUX()

[CHOW Anthony]

Actually, I did it wrong.  Now I get it.  I am able to use the openssl in /user/bin to verify a certificate.

However, if I compile and install another version in /opt/openssl-1.0.2g/bin/openssl, I am not able to get the issuer’s certificate.  I think some trusted certificate is store somewhere in Ubuntu 14.04.  How can I reference them from my version in /opt/openssl-1.0.2g/bin/openssl?

The error is from X509_verify_cert():  error 2 at 1 depth lookup: unable to get issuer certificate

Thanks for the information,

Anthony.

From: openssl-dev [mailto:openssl-dev-bounces at openssl.org] On Behalf Of CHOW Anthony
Sent: Monday, April 18, 2016 6:12 PM
To: openssl-dev at openssl.org
Subject: [openssl-dev] where is PEM_read_bio_X509_AUX()

I am trying to do “openssl verify –CAfile server.pem” and the command hang.  When I debug, I see that after calling the function PEM_read_bio_X509_AUX in load_cert() it hangs.

But I don’t seems to find this function in the OpenSSL tree.

Any insight on this?  Thanks so much.

grep -rwn . -e "PEM_read_bio_X509_AUX"
Binary file ./libcrypto.a matches
./util/libeay.num:1541:PEM_read_bio_X509_AUX                   1959    EXIST::FUNCTION:
Binary file ./demos/easy_tls/test matches
Binary file ./libssl.a matches
./crypto/x509/by_file.c:143:            x = PEM_read_bio_X509_AUX(in, NULL, NULL, NULL);
Binary file ./crypto/x509/by_file.o matches
Binary file ./crypto/ts/ts_conf.o matches
./crypto/ts/ts_conf.c:102:    x = PEM_read_bio_X509_AUX(cert, NULL, NULL, NULL);
Binary file ./crypto/pem/pem_xaux.o matches
./ssl/ssl_rsa.c:705:    x = PEM_read_bio_X509_AUX(in, NULL, ctx->default_passwd_callback,
Binary file ./ssl/ssl_rsa.o matches
./doc/crypto/pem.pod:20:PEM_read_bio_X509_AUX, PEM_read_X509_AUX, PEM_write_bio_X509_AUX,
./doc/crypto/pem.pod:154: X509 *PEM_read_bio_X509_AUX(BIO *bp, X509 **x, pem_password_cb *cb, void *u);
Binary file ./test/rsa_test matches
Binary file ./test/ssltest matches
Binary file ./test/evp_extra_test matches
Binary file ./test/sha512t matches
Binary file ./test/ectest matches
Binary file ./test/randtest matches
Binary file ./test/ecdhtest matches
Binary file ./test/evp_test matches
Binary file ./test/enginetest matches
Binary file ./test/sha256t matches
Binary file ./test/dhtest matches
Binary file ./test/md4test matches
Binary file ./test/md5test matches
Binary file ./test/srptest matches
Binary file ./test/igetest matches
Binary file ./test/sha1test matches
Binary file ./test/shatest matches
Binary file ./test/rmdtest matches
Binary file ./test/mdc2test matches
Binary file ./test/verify_extra_test matches
Binary file ./test/ecdsatest matches
Binary file ./test/bntest matches
Binary file ./test/dsatest matches
Binary file ./test/exptest matches
Binary file ./test/v3nametest matches
Binary file ./test/hmactest matches
Binary file ./test/clienthellotest matches
Binary file ./apps/openssl matches
Binary file ./apps/apps.o matches
./apps/apps.c:896:        x = PEM_read_bio_X509_AUX(cert, NULL,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160419/adb728f1/attachment.html>